cryptography
play

cryptography From internet to softwares Julie Gommes Vienna - PowerPoint PPT Presentation

May 04, 2023 •342 likes •652 views

Jihadism and cryptography From internet to softwares Julie Gommes Vienna November 2015 Julie Gommes IT Security and governance consultant - - Risk analysis - 27001 audits - Risk management Lived/worked in Egypt, Syria, Soudan, Liban,

  1. Jihadism and cryptography From internet to softwares Julie Gommes Vienna November 2015

  2. Julie Gommes IT Security and governance consultant - - Risk analysis - 27001 audits - Risk management Lived/worked in Egypt, Syria, Soudan, Liban, Tunia … - Researching on jihadist networks from years - Find me there : - Jujusete on IRC (freenode, geeknode, europnet …) @JujuSete on Twitter https://fr.linkedin.com/in/juliegommes

  3. Previous talks and trainings How NGOs can encrypt their communication - Ritimo - Paris, Sept. 15 Social networks, practices and issues for NGOs - Ritimo - Paris, may 15 Free softwares, alternatives to Skype, google, Dropbox and others Ritimo - Paris, may 2015 Information Security for journalists HITBSecConf – Amsterdam, may 14 / DefCamp – Bucarest, oct. 14 / MRMCD – Darmstadt, sept. 14 / PSES – Paris, june 14 / NDH (Workshop) – Paris, june 14 Free software and (h)activism - Ritimo – feb. 2014 Social engineering for journalists NDH – Paris, june 13 / Ubuntu party – Paris, may 13

  4. Today ? First part : starting point of the study terms and definitions developpment of websites in french language developpment of twitter acounts Second part : Let’s talk about Crypto From Moudjahdin Secret until today New tools, focused on smartphones After Paris, what about now ? Third part : crypto tools (maybe) Not westerns When crypto need religios validating Econocom P. 4 Nov. 2015

  5. Starting point Terms et  Jihad  Cryptojihad définitions  Terrorism  Wikiterrorism

  6. Starting point Terms and definitions 1/3 Jihad Econocom P. 6 Nov. 2015

  7. Starting point Terms et definitions 2/3 Cryptodjihad  Using encryption / cryptography in order to perform jihad. Terrorism (not used here)  Using fear to put political, religious, idéological presure.  So many definitions (109 different according to Wikipedia) they vary on: the use of violence, the technics used, the nature of the subject, the level of organization, etc. In many definitions also involved the criterion of the number of victims. Econocom P. 7 Nov. 2015

  8. Starting point Terms and definitions 3/3 Wikiterrorism  Term created by the geopolitical researcher Marc Hecker, working on terrorism and social networks at IFRI. (wich is include in The Three Ages of terrorism)  Using/creation of decentralized networks (online, humans, etc.), based on communication and where everyone contributes.  This helps to cover their tracks while extending an "ideal" but the other side is that those contributions are very inqual. Econocom P. 8 Nov. 2015

  9. Starting point Evolution  Number of websites in french languages vs international  Number of twitter account and what does that mean

  10. Starting point Evolution of pro-jihad websites 25000 + + 20000 15000 an 1997 An 2005 10000 An 2015 5000 28 0 Sites Inter Sites Fr Sources : http://www.lemonde.fr/proche-orient/article/2015/06/01/l-etat-islamique-compte-2-8-millions-de- francophones-sur-twitter_4645047_3218.html http://www.lefigaro.fr/actualite-france/2008/11/07/01016-20081107ARTFIG00006-l-inquietante-propagande- islamiste-sur-internet-.php Econocom P. 10 Nov. 2015

  11. Starting point Sites and forums in french language Ansar Al Haqq, most famous forum (from december 2006)  From 2006 to 2011, 50.000 messages  2010 Some members and the admin where arrested Assabyle => ribaat.org Le jardin des croyantes (Only for women) Nida Al Tawhid Most famous plateforms are the one wich are supported by ground organizations Econocom P. 11 Nov. 2015

  12. Starting point Solid tools for communication Al Farg Media Center and Global Islamic Media Forum (GIMF) Econocom P. 12 Nov. 2015

  13. Starting point Tools I used • NodeXL • GEPHI Datas • Twitwheel (en 2014) • GEPHI Mapping • Brandstweet • Tweetstats Analysis Econocom P. 13 Nov. 2015

  14. Starting point Evolution of twitter accounts 1/2 September and décember 2014, 46 000 and 90 000 Twitter accounts were used to broadcast ISIS propaganda First geolocalisation is Saoudi Arabia , before Syria, Iraq, USA, Egypt and Koweït Arabic is the most used language bi pro-jihad accounts on Twitter ( 73 % ), before english (18 %) and french (6 %) Every accound is folled by a thousand account Sources : brookings.edu Econocom P. 14 Nov. 2015

  15. Starting point Evolution of twitter accounts 2/2 From mars 2015, « Anonymous » publish on @CtrlSec0 account a list of pro- ISIS accounts They’ve annonced 9200 accounts but new messages are already published I used those accounts to renew my study Econocom P. 15 Nov. 2015

  16. Let’s talk about  From Moudjahdin secret until today encryption  More and more smartphone tools  After Paris, what about now ?

  17. Let’s encrypt Once upon a time… Source : https://theintercept.com/2015/11/15/exploiting-emotions-about-paris-to-blame-snowden-distract-from- actual-culprits-who-empowered-isis/ Econocom P. 17 Nov. 2015

  18. Let’s encrypt From M. Secret to today 11/13 – .onion webpages Twofish 12/13 09/13 07/14 2000 2007 02/13 Plateform M.Secret Email Sources : études du Middle East Media Research Institute (MEMRI), http://www.lefigaro.fr/international/2007/07/06/01003-20070706ARTFIG90133- secrets_de_moudjahidins_le_programme_de_cryptage_des_terroristes.php Econocom P. 18 Nov. 2015

  19. Let’s encrypt More and more smartphone tools Some people does not have Internet at home in some countries Easyer for instant messaging Wikiterrorism => more and more people, younger … (as WhatsApp users in Belgium a few mounths ago) Zapping culture New security risks for jihadists :  geolocalisation  Loack of control Econocom P. 19 Nov. 2015

  20. Let’s encrypt After Paris, What about now? Telegram: (10 bilion messages daily) They could still establish private connections, Telegram admitted that it is not able to block communications that happen in private groups, which can include up to 200 users. “ All Telegram chats and group chats are private amongst their participants,” Telegram’s spokesperson wrote. “We do not process any requests related to them.” (Telegram co-founder - Pavel Durov) (securityaffairs.co, yesterday) Econocom P. 20 Nov. 2015

  21. After Paris, What about now? Econocom P. 21 Nov. 2015

  22. Tools  Tools means identity  (maybe) not western tools  Home made tools validated by « god »

  23. One tool = one group Groups definitions by tools they’re using Anti Proof Crazy American certified religious Tools validated Western tools Kown tools for by the forbiden security « prayers » (not so) Paranoid « home made » tools Econocom P. 23 Nov. 2015

  24. one tool = one group Dévôts Outils « validés » Source : http://alfajrtaqni.net/amm.html Econocom P. 24 Nov. 2015

  25. One tool = one group "Cryptography is changing, time passes Crazy and we must apply the changes in religious technology in this area with the Validate command of Allah and the Sunnah of tools the Messenger of Allah peace be upon him" Econocom P. 25 Nov. 2015

  26. Un outil = un groupe Proof « Proof certified » certified Known tools Using TOR, Pigdin, Cryptocat, Wickr, and Telegram encrypted chat tools, Paranoid ProtonMail , RedPhone … Want to be protected of international interligence services ISIS support Tails using on his forums AQAP created a guide about its well using Ansar-el-Dardashah, Ansar Al Ghurrabaa Econocom P. 26 Nov. 2015

  27. Un outil = un groupe Anti Des outils (presque) pas Occidentaux Américan Westren tools forbiden « home made » tools (not so) home Twofish algorithm is in (close) every new made tools program since 2013 They comunicate a lot Creating this tools means having a technical hight level they don’t have Amn Al Mujahid par Al-Fajr Technical Committee, Tashfeer Al Jawal Econocom P. 27 Nov. 2015

  28. Conclusion Communication: rom a target to a decentralized network • Encryption is not used just since a few days • Increase in technical skills (creation of tools and piracy) and • new recruits who are not on ground A different feeling according to cryptography and existing • tools, creating the same separation as on the ground

  29. Questions ? Econocom P. 29 Nov. 2015

  30. Econocom

Recommend

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography &

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography &

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography & http://cseweb.ucsd.edu/users/mihir/cse207/ Brief History: Proliferation of computers and communication systems in 1960s brought with it a demand to protect

273 views • 24 slides
Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M,

Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M,

Karlstad University Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M, C, E, D, K) M: the set of plaintexts C: the set of ciphertexts E: M x K -> C enciphering functions D: C x K

446 views • 40 slides
Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY

Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY

Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY Plaintext Cyphertext More definitions block cipher stream cipher hash function shared key public key digital signature

383 views • 16 slides
Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do?

Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do?

PQCRYPTO Summer School on Post-Quantum Cryptography 2017 Stefan Klbl June 20th, 2017 DTU Compute, Technical University of Denmark Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do? Authentication

711 views • 47 slides
Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Cryptography Concepts and Terminology Security Concepts Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and Terminology Cryptography School of Engineering and Technology CQUniversity

453 views • 11 slides
Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Cryptography Concepts and Terminology Security Concepts Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and Terminology Cryptography School of Engineering and Technology CQUniversity

322 views • 11 slides
Uses of Cryptography What can we use cryptography for? Lots of things Secrecy

Uses of Cryptography What can we use cryptography for? Lots of things Secrecy

Uses of Cryptography What can we use cryptography for? Lots of things Secrecy Authentication Prevention of alteration Lecture 4 Page 1 CS 236 Online Cryptography and Secrecy Pretty obvious Only those knowing the

303 views • 15 slides
Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but

Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but

Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but hard-to-solve problems were discovered. Computational Complexity, by Fu Yuxi Cryptography 1 / 75 Cryptography is closely related to some

785 views • 76 slides
Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information:

Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information:

Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information: Using microscopic physical state of quantum systems (spin of atoms/sub-atomic particles, polarization of photons etc.) to encode information

1.95k views • 154 slides
Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography Symmetric cryptography DES 3DES AES Asymmetric cryptography Diffie-Hellman key exchange 2 Modern cryptography Moving into

338 views • 16 slides
Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is

Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is

Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is cryptography? Related fields: Cryptography ("secret writing"): Making secret messages Turning plaintext (an ordinary readable message)

1.2k views • 57 slides
Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 CCA Security SIM-CCA Security (PKE) Recv Send PK/Enc SK/Dec Replay Filter Secure (and correct) if: s.t. output of is distributed

1.26k views • 101 slides
Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Cryptography Public Key Cryptography Concepts of Public Key Cryptography Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia Prepared by Steven Gordon on 20 Feb 2020, public.tex, r1803 1

421 views • 7 slides
Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography

Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography

Homomorphic Cryptography & Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography Bike lock of Internet Provides many important building blocks for security For example, encryption or

699 views • 31 slides
Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security

Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security

PQCRYPTO Summer School on Post-Quantum Cryptography 2017 Stefan Klbl June 19th, 2017 DTU Compute, Technical University of Denmark Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security fail?

758 views • 72 slides
Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

06-20008 Cryptography The University of Birmingham Autumn Semester 2012 School of Computer Science Eike Ritter 15 November, 2012 Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography Diffie-Hellman Key

207 views • 8 slides
FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004

FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004

FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004 Cryptography in FIPS 201 Cryptography in FIPS 201 Digital signatures on logical credentials o CHUID, X.509 certificates, biometrics Cryptographic

272 views • 12 slides
Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric cryptography CS 239 Asymmetric cryptography Computer Security February 5, 2003 Lecture 7 Lecture 7 Page 1 Page 2 CS 239, Winter 2003 CS 239,

263 views • 11 slides
Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric cryptography CS 239 Asymmetric cryptography Computer Security January 26, 2005 Lecture 5 Lecture 5 Page 1 Page 2 CS 239, Winter 2005 CS 239,

321 views • 13 slides
Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of

Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of

Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of public key crypto and RSA. Fall 2018 CS 222: Discrete Structures 1 Definition Cryptology is the study of secret writing Concerned with

681 views • 54 slides
Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption

Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption

Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption principles Encryption quality Cryptography Public key cryptography The art of making Next week: Example algorithms DES, AES, AES

893 views • 78 slides
Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography Asymmetric cryptography Diffie-Hellman key exchange (last time) Pubic key: RSA Pretty Good Privacy (PGP) Digital signing Public

682 views • 26 slides
Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in Practice (13) How Cryptography is Used in Applications The main drawback of public key cryptography is the inherent slow speed of the public key

442 views • 14 slides
Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and Rivest-Shamir- Adleman) Two keys: private (SK), public (PK) Encryption: with

445 views • 17 slides

More recommend